Michael,
I would suggest using the pkcs11rc file (contained in the PKCS#11 code) and turning logging to LOW (log low priority messages)
This will create a PKCS11.log file which can be used to determine the problem ...
bsiPlugin.bundle and commonAccessCard.bundle are two different animals - although they have similar API's .....
Thanks, Dave
On Jan 6, 2005, at 10:49 AM, Michael Olson wrote:
------------------------------------------------------------------------ ------------I'm trying to get a CAC card in use under Fedora Core 3.
What I'd like to get going altogether is
Working on Web Client Side Authentication first, I have an ActiveCard USB Reader (v2) and a Schlumberger Access 32K V2.
Using PCSC-Lite 1.2.0 and CCID 0.4.1 I seem to have no problems reading the card. I can see it inserted and get my ATR.
I built commonAccessCard.bundle from Darwin and muscleframework 1.1.5, associated it with bundleTool and XCardII 0.9.9 can see the card.
Next up I built libmusclepkcs11.so and loaded it into FireFox 1.0 and tried hitting a client side authenticated page. It prompted me to unlock the card, accepted my pin, and then gave me a list of certificates to use.
This is where things stopped working though. I tried all the certificates listed but can not view the page. (Error establishing an encrypted connection to xxx.navy.mil. Error Code: -12222.)
I tried using bsiPlugin.bundle from ActiveCard Gold 1.0. It seems to work pretty much identically to commonAccessCard.bundle so I also tried using libpkcs11.so with it. Firefox wouldn't even load it.
I've switched back to commonAccessCard.bundle and libmusclepkcs11.so but have no idea what to do to debug things at this point.
Any recommendations?
Thank You, Michael _______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
David Corcoran [EMAIL PROTECTED]
Identity Alliance http://www.identityalliance.com
Smart Cards, Biometrics, Training, Identity Management
------------------------------------------------------------------------ -------------
_______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
